sandbox/rootless.h